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Mobile App 

Let’s compare hackers with pirates; everyone is in danger and no one seems to be spared 
in the waters they surf. However, it is possible to enjoy a bit of security if you arm yourself 
to the teeth against the hacker scum. We share our knowledge about the securing of apps 
with you. 


What follows is useful information for (future) app owners and users. It is information 
that puts privacy-sensitive data in calmer waters. 


Common Weaknesses in Apps 


Anyone who is aware of the common security risks in apps will naturally take them into 
account during construction. We list a few weaknesses in securing an app for you, so that 
you can get over the shock of the previous paragraph a bit. 


Here we go: 


e Weak protection of the binary code. 

e The data transport between app and server is insufficiently secured. 

e Want to know more security risks? Eight other common weaknesses can be viewed 
here. No worries; if you press the link, you don’t get a virus. 


So what is the problem and what is the solution? An example: Mobile malware exploits 
weaknesses or bugs in the code of apps. securing an app can also be attacked via other 

means or privacy-sensitive data from customers can be stolen, such as via the chip of a 
telephone or a so-called rogue application. 


To reduce the chance that hackers will encounter weaknesses or bugs in an app, an app 
developer keeps the code ‘hidden’ via encryption. This makes the code almost unreadable, 
forcing hackers to go to great lengths to interpret, crack and abuse it. 


Measures for Consumers and Businesses 


Employees and consumers can take the following precautions: 


1. Is an antivirus app recommended? 


Ah, control is the mother of certainty. A regular iPhone or iPad cannot download apps 
from unknown sources; these mobile devices are therefore relatively safe. Android phones 
come standard with the antivirus service from Google; Varify Apps. Please note, the 
service only detects app-based malware, not web-based malware (via the browser, for 
example). 
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2. The problem with old phones 


Personal data is nowadays encrypted with encryption, at least on many smartphones and 
tablets. On the iPhone this happens by default from iOS 8.0. On Android phones, data is 
automatically encrypted from Android 6.0 Marshmallow. Also check whether your phone 
is up to date. We strongly recommend updating your phone, your apps and the latest OS 
version. However, this is not always possible on an outdated device, as these are not 
always supported with a new update. View the latest OS versions of iOS and Android here 


3. Unknown sources setting (Android only) 


It is unwise to activate the security setting ‘Unknown sources’ on an Android phone. If 
this setting is activated, you can download apps from outside the app store. You will find 
almost no malware in the app store; however, it does exist outside. Therefore, it is better 
to leave the ‘Unknown sources’ setting off. 


4. Beware of apps that do not contain malware 


Of course, not all apps contain malware. Despite that, apps can still sniff around your 
data. iPhone apps and Android 6.0 (and later) require permission before they gain access 
to certain data and functionalities. When a decibel meter app asks for access to your 
contacts, camera, GPS and Facebook account, alarm bells must undoubtedly start ringing 


5. The super user setting 


You can gain access to the entire operating system via root. Handy, to adjust everything to 
your own taste. In essence, rooting is safe if you know what you are doing. The security 
risk lies in malware that needs access to ‘the root’ in order to function. If the user does not 
have access to the root himself, then neither does the malware. 


6. Set up your smartphone and tablet as safely as possible 


You know the drill ; update apps. And do not turn on the following functions constantly: 
automatic connection of WiFi to hotspots, GPS, Bluetooth and NFC. 


7. Always update your phone or mobile device to the latest OS version. 


For companies 


While smartphones and tablets pose less of a risk than the desktop when it comes to data 
breaches, the security of apps should not be ignored. 


Customization 


Security is a customized product. Not every (app) solution requires the same type of 
security. We give a simple but clear example: a bag or suitcase, in most cases there is no 
lock on it. When is it? For example, if it contains very confidential documents, or if it is 
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full of diamonds. We would be happy to talk to you and advise you on safety risks and 
possible solutions. 


Outreach Way is happy to think along with you about solutions for a securing an app. 
Interested? Then contact us! Over a cup of coffee, we discuss the options and answer your 
questions. Of course without obligation. 
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